I've just downloaded the latest build for 7.1.2 release and the problem continues for remote and local calls :(
Here are bits of my standalone.xml file:
<security-domains>
<security-domain name="AsfJaas" cache-type="default">
<authentication>
<login-module code="com.asf.security.server.jaas.AsfBaseLoginModule" flag="required" module="deployment.capone.ear.asf-security-server-2.0-dev.jar">
<module-option name="password-stacking" value="useFirstPass"/>
<module-option name="debug" value="true"/>
</login-module>
</authentication>
</security-domain>
<security-domain name="AsfRemoteJaas" cache-type="default">
<authentication>
<login-module code="com.asf.jboss7.security.AsfRemotingLoginModule" flag="required">
<module-option name="password-stacking" value="userFirstPass"/>
</login-module>
</authentication>
</security-domain>
</security-domains>